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Mission  critical  systems  are  typically-  large,  have  iTl'g-S  performance,  high 
reliability  and  stringent  deacifne  requirements,  Oesi-gn  methodology-  that 
separates  functional  design  from  the  performance  rel  ia6l:l  fty  and  resiT'tIme 
requirements  are  no  longer  acceptable.  The  methodology  should  Integrate 
functional  correctness  specification  with  the  specification  of  performance, 
reliability,  safety,  security  end  real^tme  requ I reneihts ,  The  approaches  for  the 
integrated  specif JcaTlon  of  both  the  functional  and  nonfunctional  aspects  of 
systems  design  need  To  be  i nvesrlgated.  Automated  translation  of  the  perfomance 
and  reliability  aspects  of  the  dlsign  specification  into  an  underlying  modeling 
language  need  to  be  researched.  Methods  of  traderoff  and  cptimization  between 
various  competing  measures  of  system  effectiveness  need  to  be  developed.  The 
objective  is  to  investigate  those  Issues,  of  integrated  methods  of  system 
disign  specification,  specification  and  solution  of  system  performance  and 
rel labi I ity  modes. 
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1  Measures  of  Productivity 

,  Under  the  auspices  of  this  grant,  we  have  published  one  journal  artide  and  three  journal  articles 

i  are  accepted  for  publication.  We  have  published  one  conference  artide  and  another  will  appear 

!  in  1993.  We  have  written  two  book  chapters  (both  invited).  Both  the  books  are  expected  to  be 

'  published  soon.  A  report  on  “Tools  and  Techniques  for  Dependability  ModeUng  and  Analysis:  A 

'  Survev”  was  delivered  to  NSWC  as  requested  by  them  [8]. 

i. 


Tools,  SPNP  and  SHARPE,  that  we  have  developed  earlier,  are  in  wide  circulation  and  use 


'  The  Pr has  been  elected  to  be  a  Fellow  of  the  IEEE.  He  was  the  program  chair  of  thv. 

EleventhSvmposium  on..Reliable  Distributed  Systems  and  he  guest-edited  a  special  issue  of  the 
'  IEEE  Transactions  on  ParaUel  and  Distributed  Systems  (to  appear  in  November  1992),  The  PI  , 
on  the  editorial  boards  of  the  Journal  of  Electronic  Testing  (JETTA)  and  the  JournaUf  Computer 
.  Svstem  Science  and  Engineering.  He  is  designated  the  Chairman  of  the  1993  IAS  TED  Coaferenc 
The  PI  is  a  voting  member  of  the  IEEE  Computer  Society  PubUcations  Board 'and  he  chaii.- 
the  Transactions  Operations  Committee  of  the  Society.  He  was  on  the  f  ^ 

committees  of  many  conferences.  He  was  invited  as  a  tutonal  speaker  at  SIC^ETRICS  92  and 
was  an  invited  speaker  at  the  Numerical  Linear  Algebra:  Markov  Chains  and  Queueing  Networks 
Workshop  in  Minneapolis,  Jan.  92. 
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2  Detailed  Summary  of  Technical  Progress 


Under  this  grant  we  have  made  considerable,  progress.  First,  an  invited  paper  containing  formal 
definition  of  stochastic  reward  nets  (SRNs),  their.logical,  temporal  and  sensitivity  analysis  are 
discussed  in  [3], 

Several  interesting  applications  of  SRNs  have  been  developed.  “This  includes  analyzing  con¬ 
current  and  fault-tolerant  software  [4],  performance,  models  of  client-server  systems  [5],  a  perfor¬ 
mance  model  of  a  polling  system  [2],  and  a  performability  model  of  real-time  system  [9].  In  [5]  we 
have  collaborated  with  a  researcher  from  the  GTE  Labs  in  Waltham,  MA. 

"  ■  V  'Many  of  the  application  papers  necessitated  the.usetof  approximate  models  in  order  to  avoid 
"largeness.  In  [5]  SRN  folding  has  been  used.  In  [9]  behavioral'‘*decom position  has  .been  used  while  ir 
[2]  fixed-point  iteration  has  been  used.  In  each  case,  the  approximation  error  is  studied  empirically. 
In  [2]  existence  of  the‘ fixed  point  solution  is  shown  using  Brouwer’s  fixed -point  theorem. 

‘  .  :  .We  have  analyzed  the  reliability  of  FDDI  token  ring  using  combinatoric  ^methods  [6]. '  We 
have  also  analyzed  the"  reliability  of  disk  arrays  [7]-  .FinaUy,  a  very  detailed  model  of  program 
completion  time  on  processor  subject  to  failure  and  repair  has  been  developed  and  solved  using 
transform  inversion  techniques  [1]. 
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3  Lists  of  Publications,  Presentations  and  Reports 
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4  Transitions  and  DOD  Interactions 


We  have  had  extensive  discussions  with  Paul  Wallenberger,  Steve  Howell,  and  Charles  Yeh  of 
NSWC.  We  have. also  had  many  discussions  with  Tom  Lawrence  of  RADC.  Bob  Goettge  and  his 
company  are  likely  to  integrate  our  SHARPE  tool  with  their  START/1  tool.  Our  concurrent  grant 
-  from  NSF  leverages  the. ONR  grant  very  well. 

Our  two  industrial  contracts  with  Union  Switch  and  Signals  and  Boeing  are  both  involved 
with  integrating  dependability  modeling  in  process  of  design.  Once  again,  this  is  related  to  the 
ONR  grant. 

.  Our  tools  have  elicited  a  lot  of  interest  in  universities  as  well  as  industry.  For  instance,  we  art 
•  currently  designing  and  implementing  and  an  intergrated  toolkit  for  reliability  analysis.  Our  tool 
SHARPE,  HARP  and  SPNP  are  in  the  toolkit.  We  are  helping  Union  Switch  design  a.  designer  ; 
tool,  D_RAMP,  that  contains  SPNP  as  an  engine.  They  have  produced  a  graphical  user  interface  fo 
SPNP;  Technical  University  of  Vienna  has  integrated  SHARPE  in  their,  real-time  system  design  tool 
■•'Called  MARPLE.  University  of  Edinburgh  and  RPI  have  both  produced  a  graphical  user  interface 
for  SPNP. 

We  will  be  very  interested  in  discussions- with  the  TIGER  (reliabilty  modeling  system)  group 
at  Navy  about  integrating  TIGER  with  SHARPE;  we  believe  this  will  be  highly  beneficial. 
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5  Soffcwcure  and  Hardware  Prototypes 

None. 
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